Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/1oSj74InOqEfV2yHTqqpEL_UUuw.roa
File:                     1oSj74InOqEfV2yHTqqpEL_UUuw.roa (raw, json)
Hash identifier:          +Th0Ly9hE41q/nEw15e+7DhoO4bLTtXHWi8+g0L4kJE=
Subject key identifier:   D6:84:A3:EF:82:27:3A:A1:1F:57:6C:87:4E:AA:A9:10:BF:D4:52:EC
Certificate issuer:       /CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
Certificate serial:       0826A3A2
Authority key identifier: 9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/1oSj74InOqEfV2yHTqqpEL_UUuw.roa
Signing time:             Sat 01 Jan 2022 03:01:53 +0000
ROA not before:           Sat 01 Jan 2022 03:01:53 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     43260
IP address blocks:        185.248.56.0/22 maxlen: 24
                          2a0d:2bc0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 136749986 (0x826a3a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e888901024e8c6b27174da9e03dc8a09dcb8833
        Validity
            Not Before: Jan  1 03:01:53 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=d684a3ef82273aa11f576c874eaaa910bfd452ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:78:97:53:40:57:62:a8:b5:e3:be:40:f3:9e:
                    c1:34:13:0f:7a:f6:08:d5:e6:43:68:6b:3c:e5:04:
                    d3:19:3e:69:11:2a:62:de:44:63:8a:ea:0a:50:47:
                    98:b0:8e:be:ca:65:a2:c5:30:f4:a5:62:c2:e2:22:
                    66:23:40:ee:a6:5b:07:99:80:b7:83:a1:9d:74:90:
                    e3:7c:30:0e:99:57:75:74:63:ae:b8:b6:90:56:79:
                    60:87:bf:87:2a:ca:38:44:da:75:84:31:a3:43:bd:
                    dd:d6:aa:d1:6e:2b:da:9e:b8:37:a9:99:1c:20:86:
                    a9:00:99:08:be:eb:f0:f1:08:bb:83:92:ea:ca:96:
                    b5:db:63:1f:61:1c:2a:78:f6:8b:79:bc:62:c2:fe:
                    de:41:c3:8c:c2:18:28:f6:00:02:32:8a:9f:e8:3a:
                    4a:db:46:a0:b6:81:ae:1c:9e:ae:2a:06:64:77:9a:
                    44:e7:17:c7:7c:b0:3f:41:3c:76:59:dc:e5:3f:7b:
                    58:7a:ac:c5:54:e2:09:61:ba:8e:10:15:74:9f:ba:
                    aa:53:64:b7:25:3a:1b:d1:4d:ce:89:b4:8c:8a:d8:
                    6a:3f:9c:c6:9a:ca:35:bf:35:65:46:84:25:d3:10:
                    23:b1:7d:9e:1d:a5:aa:4e:fa:13:16:c5:d0:79:f8:
                    5f:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:84:A3:EF:82:27:3A:A1:1F:57:6C:87:4E:AA:A9:10:BF:D4:52:EC
            X509v3 Authority Key Identifier:
                keyid:9E:88:89:01:02:4E:8C:6B:27:17:4D:A9:E0:3D:C8:A0:9D:CB:88:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/noiJAQJOjGsnF02p4D3IoJ3LiDM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/1oSj74InOqEfV2yHTqqpEL_UUuw.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/0482c8-6fbf-481c-b5cb-a13b2f116521/1/noiJAQJOjGsnF02p4D3IoJ3LiDM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.248.56.0/22
                IPv6:
                  2a0d:2bc0::/48

    Signature Algorithm: sha256WithRSAEncryption
         3f:e0:54:f4:b2:40:47:f8:62:25:6c:9d:3e:fb:a4:39:51:d6:
         d6:81:18:78:89:41:00:f8:bd:98:20:2d:6e:a1:0d:c6:74:79:
         cb:c5:d4:cd:8d:9a:f0:c6:37:f7:0f:bc:ec:05:28:d4:f1:7a:
         7a:21:59:39:97:4c:be:d0:80:66:b4:b1:e7:f7:fe:a1:1b:e0:
         c0:bc:b5:eb:2f:52:34:77:97:a0:83:e5:3a:74:48:3f:15:a2:
         bd:c3:d8:aa:61:3d:ce:96:3b:c8:3f:66:ca:c7:d9:12:e7:db:
         a7:7a:09:4f:81:79:8f:a4:ae:6b:23:79:8b:fc:8d:d7:e0:c5:
         1d:2b:de:53:14:ce:29:00:85:93:9f:26:74:1d:83:3f:7c:44:
         ab:90:d1:d4:0f:b7:24:27:fe:ff:b0:9c:01:f4:cf:ed:d7:f2:
         da:b9:e0:22:f9:a2:30:97:e0:01:d5:d5:fe:a7:57:9f:aa:ee:
         05:a7:32:ba:74:a3:7f:e0:f4:f3:a5:9a:36:5c:be:ad:84:6c:
         cd:ca:b5:b1:28:82:3f:a1:ca:4a:be:aa:83:3b:07:d7:10:92:
         3b:5f:e7:bc:c1:c9:e9:be:59:f5:7c:55:17:0a:c3:92:1e:12:
         4e:1d:d9:9d:72:a1:38:2b:e6:52:85:9d:02:2c:0d:b2:b0:73:
         5e:cf:08:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----